Re: Revert MD4



Federico Bertola wrote:
Hi all, I'm stuck with this:
at university our teacher says that MD4 is very easy and very fast to break (there are a tons of collisions-finding algorithms) and also can be reverted (to the original data) if we have the exact original file size and some (about 10%) chunks of the original data.
Also I've heard that some protocols can "repair" damaged data with this technique.
It's that true?

How would an MD4 hash value allow you to distinguish "the" original file from more than about 2**128 different possible original files?

If yes, how can I prove that?

--Mike Amling
.



Relevant Pages